Senior InfoSec Lead / Cyber Transformation Lead

Job description

We are currently recruiting for a Senior InfoSec Lead or Cyber Transformation Lead (exact title tbd) to join our Information Security team in London. This senior manager level role plays a pivotal role in ensuring the effective and efficient operation of the Information Security (InfoSec) function which is located across the United Kingdom, United States and Singapore. Working closely with the CISO, the global InfoSec team, the wider IT organization, and other key stakeholders, the incumbent supports all aspects of the InfoSec function to amplify its efficacy, including:

• Driving communications and engagement on cyber topics across the organization, with guidance from the CISO.
• Implementing and maintaining effective management of the portfolio of InfoSec programs, projects and initiatives.
• Embedding a performance culture through effective team and stakeholder engagement and regular reporting.
• Overseeing a range of internal processes related to the running of the function.

Key relationships

• Global IT Leadership Team (including CIO, CTO, COO)
• Global Head of Digital and Marketing Technology
• Members of the Information Security Committee
• Local Office Leaders
• Risk Function Leadership and Chair of the Risk Committee
• Global Managing Partner, Partner (Integration Lead) and as necessary the Senior Partner and Board

Role and responsibilities
Communication and Engagement

• Establish a stakeholder map and plan an appropriate cadence of engagement.
• Effectively communicate the CISO’s InfoSec vision and purpose with impact and credibility, both in person and in writing.
• Collaborate with the CISO and InfoSec leadership to craft key security messages and develop a delivery plan tailored to target audiences and channels.
• Collaborate with the firm’s internal and external comms teams where relevant to shape, align, implement, and execute the CISO comms plan and activities.
• Proactively network and manage relationships supporting the CISO in building and maintaining trust and confidence amongst colleagues and stakeholders.
• Explore new and innovative communications methods that respond to feedback and drive engagement and achieve continuous improvement.

Enable a high performing team

• Manage a broad range of support responsibilities essential for the smooth running of the function, whilst improving operational effectiveness and driving continuous improvement in InfoSec processes and tools.
• Responsible for setting cadence, direction, agenda and flow of InfoSec meetings, facilitating effective ways of working.
• Support the CISO in the design and implementation of transformation initiatives.
• Support the CISO to instantiate key result indicators and key performance indicators for the team for both team and wider business use.
• Support the onboarding of new joiners to InfoSec.
• Co-own together with the CISO and Leadership Team, the people and talent strategy for the team, enabling a consistent approach to staff development plans and learning journeys with appropriate focus on diversity, equity and inclusion; engagement; wellbeing; skills and capabilities; and succession planning.
• Work closely with the CISO and relevant people managers and HR colleagues to progress and respond to people matters including, workforce planning and recruitment.
• In collaboration with the firm’s local recruitment teams, support recruitment activities directly led by the CISO, to include assistance with the drafting of business cases and role profiles and tracking campaign progress.
• Attend all key relevant meetings, deputising for the CISO where necessary.

Operational Management

• Oversee, manage and support the portfolio of InfoSec programs, projects and initiatives, ensuring alignment with strategic objectives.
• Oversee financial planning and budget reporting of the InfoSec function working closely with the IT COO.
• Assist the CISO in managing dependencies between programs, projects and initiatives within the InfoSec space and more widely.
• Bring focus, pace, and discipline to the projects, driving progress in a consistent and transparent way, identifying opportunities, risks and dependencies, and making interventions where appropriate.
• Establish and maintain project tracking and reporting, monitoring the status of InfoSec projects and pipelines of work, including agreed KPIs and KRIs to the CISO, stakeholders and ExCo.
• Support the CISO with the preparation of business cases, proposals and assistance with high impact presentations.

Key requirements – Essential

• An MSC in Cyber Security or Computer Science or a CISSP or CRISC certification, or substantially equivalent workplace experience.
• Extensive previous experience working in a busy InfoSec function for a large global organisation.
• Robust technical experience and understanding of various InfoSec disciplines.
• Exceptional written and verbal communications skills.
• Able to operate with tact and discretion pragmatically in an environment where issues are often complex and lines of reporting are ambiguous.
• Able to interpret financial reports accurately and with confidence.
• Aware of and able to implement HR and other Firm policies in respect of management and staff.
• Able to juggle a wide range of issues and projects at the same time, as well as to prioritise and manage own and others’ time effectively.
• A natural networker with the ability to get to know people across a range of cultures and business settings.
• Proven track record in working directly with senior stakeholders, with the confidence to follow up on issues, influence and negotiate where deliverables and outcomes may be conflicting.
• Meticulous, strong and effective organizational and planning skills and the ability to work well individually and as part of a team.
• Resilient and calm. Able to lead and deliver in high-pressure, unpredictable environments working to tight, often conflicting deadlines, and within resource constraints.
• Proficient in MS365 packages (Word, PowerPoint, SharePoint, Excel, Teams).

Key requirements – Desirable

• Ability to translate cybersecurity language into plain and accessible language.
• Proven record of leading cyber risk transformation initiatives within complex organizations.
• Experience in a technology PMO setting, managing cybersecurity projects / programs with commercial awareness of the planning, design and implementation of these.
• Cybersecurity knowledge, spanning people, processes, technology, emergency operations and management of incidents, recognizing the alignment of cybersecurity within the business and organizational culture.
• Legal experience highly desirable.

Should you require additional support at any stage of the recruitment process due to a disability or a health condition, please do not hesitate to contact a member of our recruitment team who will work with you to provide any adjustments as required.
We are an equal opportunities recruiter and do not discriminate on the basis of race, colour, sex, religion, sexual orientation, national origin, disability, or any other protected characteristic.
We recognise that our people are our most valuable asset, which is reflected in the wide range of benefits that are available to our employees. Some of these benefits include: our occupational pension scheme, group income protection cover, private medical insurance, mental health resources and free apps, health and wellbeing services encompassing an onsite gym, wellbeing centre and GP service, emergency back-up care support, parental and special leave, holiday entitlement increasing with length of service, holiday trading, season ticket loans and online discounts and lifestyle management services.

Additional information - External

A&O Shearman is a new global industry-leading law firm, with nearly 50 offices in 29 countries worldwide. Our fluency in English law, US law, and the laws of the world’s most dynamic markets, enables us to provide unmatched insight and seamless delivery to clients. We work on challenging and important deals and disputes that have the potential to shape the future.

We offer exceptional opportunities for our people; opportunities to work for the world’s leading businesses; to transform the status quo, and to deliver your best work, helping you and your career to thrive, while delivering unparalleled outcomes for our clients.

Whether you're helping clients solve complex challenges, transforming the ways we manage our business, or ensuring the smooth-running of our operations, this is an environment where you can belong and excel. We provide first-rate training and development, we are committed to diversity, equity and inclusion and we provide support and ways of working that help you optimise your wellbeing.

What truly defines a career with us? We recruit the best and ask for the best of you. And together, we will redefine success.